Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TqoW48gbBLCyT3_BRPtOAjNS7t8.cer
File: TqoW48gbBLCyT3_BRPtOAjNS7t8.cer (raw, json)
Hash identifier: OxvmiS87hFlRy5hqc0w2zohCHsL+Vl/cVU52a5v+m7U=
Subject key identifier: 4E:AA:16:E3:C8:1B:04:B0:B2:4F:7F:C1:44:FB:4E:02:33:52:EE:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185701D605CF448D2031F2BC25FE9B2C180
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/ad0707-ed5a-4c7a-b6e8-476b0763370f/1/TqoW48gbBLCyT3_BRPtOAjNS7t8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/ad0707-ed5a-4c7a-b6e8-476b0763370f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 01:34:11 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 79.110.236.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1d:60:5c:f4:48:d2:03:1f:2b:c2:5f:e9:b2:c1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:34:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4eaa16e3c81b04b0b24f7fc144fb4e023352eedf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9d:6b:63:37:5d:71:d5:fa:88:28:9d:fd:bc:
11:07:44:fc:5f:7c:12:cb:cc:e7:4a:06:9a:5e:fa:
6a:ce:98:e7:10:0d:49:6b:55:07:27:51:1d:e7:ec:
a6:9c:64:a2:96:7c:47:70:90:d4:5c:47:22:48:38:
20:92:5d:45:7a:a7:84:82:92:f5:c7:70:d1:a2:c5:
cb:d1:46:71:d1:09:82:1b:3d:0d:1d:57:14:91:95:
8b:d5:90:47:c2:04:f3:05:64:04:fa:b6:dc:ad:cd:
d7:c0:57:66:f6:3e:85:22:c1:f0:56:d4:b7:7c:9b:
50:fd:35:dc:fc:23:bc:7c:d0:86:4b:02:63:f6:58:
24:2c:bc:e7:b4:ce:a0:ac:40:77:93:b5:23:f1:23:
8c:d2:7e:a0:98:e9:c8:ef:b6:f8:49:3b:ce:e4:14:
d3:84:3b:56:cd:c3:b6:84:fd:76:ae:bc:c8:59:46:
21:3f:21:a9:a5:69:29:d7:f9:68:7e:d0:0b:57:ad:
4b:a7:9d:c4:22:ef:4b:d7:10:2f:16:fc:cd:2b:5b:
88:67:5d:8f:bd:fe:62:c5:87:cb:b2:c1:8c:b4:8b:
2e:6b:c8:e0:32:d9:82:c2:a5:25:69:2f:1c:1f:c6:
c6:6a:5a:7b:6e:a1:b1:5a:40:44:b0:63:d0:53:47:
e5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:AA:16:E3:C8:1B:04:B0:B2:4F:7F:C1:44:FB:4E:02:33:52:EE:DF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ad0707-ed5a-4c7a-b6e8-476b0763370f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ad0707-ed5a-4c7a-b6e8-476b0763370f/1/TqoW48gbBLCyT3_BRPtOAjNS7t8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.236.0/24
Signature Algorithm: sha256WithRSAEncryption
91:fc:9a:96:f7:b7:05:d8:1e:ae:b7:75:fa:1c:cc:5d:8e:98:
b1:4a:33:af:fd:07:86:6a:e1:20:34:98:15:34:b2:a8:d6:38:
1d:47:f4:ca:da:66:4c:89:67:18:a0:73:d7:af:f4:57:7f:50:
43:c2:5b:5a:54:f1:7c:f1:3e:68:87:74:a6:e4:33:b9:2d:10:
e0:e3:66:b9:eb:71:f6:1b:0b:4d:13:25:63:3e:89:3b:d5:ac:
36:78:cd:60:0f:bd:9b:99:22:0e:dc:68:d2:c9:4c:1c:88:39:
9e:2f:dc:9b:7a:b6:d8:a0:09:de:36:ee:f3:00:87:bc:46:5e:
34:0a:1d:15:e0:33:63:e3:1a:f4:81:d5:74:ca:a3:e1:bc:ad:
b7:9c:b5:fd:08:42:12:6e:0f:49:27:de:af:8e:5d:4b:b7:f0:
ee:30:38:36:58:c9:4e:e4:35:dd:6a:27:f5:95:c6:7f:c9:89:
6f:ec:d2:e8:da:5f:6e:6f:77:f6:d4:a5:2a:19:dd:bb:6d:f4:
6b:f0:92:5d:5c:63:d5:ad:33:94:cf:bf:77:d6:f6:7c:78:75:
06:47:67:b0:95:df:29:4c:3b:e2:a1:6d:e5:4f:8c:d7:9d:b6:
81:25:91:49:18:65:db:89:23:28:85:29:68:41:72:7c:38:7a:
2d:a8:72:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 15 13:47:51 2023 by rpki-client on console-fra.rpki-client.org